Sounds like you may want to consider installing a keylogger - normally I'd be against that deep of spying but if he's leaving obvious signs that he's surfing to places he shouldn't be it'd show you where.
Either that, or set up security in IE so that you need a password to go to any web sites that aren't on the approved list.